CheckPoint CCSA 156-215.75 Questions & Answers

• Question 491:

  ALL of the following options are provided by the SecurePlatform sysconfig utility, EXCEPT:

  A. DHCP Server configuration

  B. GUI Clients

  C. Time and Date

  D. Export setup

  Correct Answer: B

• Question 492:

  Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

  A. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy / Install on Target.

  B. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the row Install On of the Rule Base.

  C. In the menu of SmartDashboard, go to Policy / Policy Installation Targets and select the correct firewall via Specific Targets.

  D. When selecting the correct Firewall in each line of the row Install On of the Rule Base, only this Firewall is shown in the list of possible installation targets after selecting Policy / Install on Target.

  Correct Answer: C

• Question 493:

  You are the Security Administrator in a large company called ABC. A Check Point Firewall is installed and in use on SecurePlatform. You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on SecurePlatform. Where can you view them? Give the BEST answer.

  A. /etc/conf/route.C

  B. /etc/sysconfig/netconf.C

  C. /etc/sysconfig/network-scripts/ifcfg-ethx

  D. /etc/sysconfig/network

  Correct Answer: B

• Question 494:

  When using SecurePlatform, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

  A. Open the WebUI, select Network > Connections > eth0. Place the new MAC address in the field Physical Address, and press Apply to save the settings.

  B. As expert user, issue these commands: # IP link set eth0 down # IP link set eth0 addr 00:0C:29:12:34:56 # IP link set eth0 up

  C. As expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56

  D. Edit the file /etc/sysconfig/netconf.c and put the new MAC address in the field (conf : (conns :( conn :hwaddr ("00:0C:29:12:34:56")

  Correct Answer: B

• Question 495:

  The third shift administrator was updating security management server access setting in global properties. He managed to lock the entire Administrator out of their accounts. How should you unlock these accounts?

  A. Logging to smart dash board as special cpconfig_admin account. Right click on each administrator object and select Unlock.

  B. Type fwm lock_admin ua from the command line of the security management server

  C. Reinstall the security management Server and restore using upgrade _imort

  D. Delete the file admin .lock in the sfwdir/ tmp/directory of the security managem,ent server.

  Correct Answer: B

• Question 496:

  The third-shift Administrator was updating Security Management Server access settings in Global Properties. He managed to lock all administrators out of their accounts. How should you unlock these accounts?

  A. Reinstall the Security Management Server and restore using upgrade_import.

  B. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.

  C. Type fwm lock_admin -ua from the Security Management Server command line.

  D. Login to SmartDashboard as the special cpconfig_admin user account; right-click on each administrator object and select unlock.

  Correct Answer: C

• Question 497:

  Which utility is necessary for reestablishing SIC?

  A. fwm sic_reset

  B. cpconfig

  C. cplic

  D. sysconfig

  Correct Answer: B

• Question 498:

  You are consulting with an Administrator who has locked himself out of SmartDashboard installed on a standalone SecurePlatform Security Gateway. Now, he cannot access the Security Management Server via SmartDashboard or any other SmartConsole tools. How can you get him reconnected to SmartDashboard?

  A. Run fw uninstall localhost on the Security Gateway.

  B. Run fw unloadlocal on the Security Gateway.

  C. Run fw unlocklocal on the Security Management Server.

  D. Delete the $fwdir/database/manage.lock file and run cprestart.

  Correct Answer: B

• Question 499:

  What is the syntax for uninstalling a package using newpkg?

  A. s

  B. u

  C. newpkg CANNOT be used to uninstall a package

  D. i

  Correct Answer: C

• Question 500:

  Which utility allows you to configure the DHCP service on SecurePlatform from the command line?

  A. sysconfig

  B. dhcp_cfg

  C. cpconfig

  D. ifconfig

  Correct Answer: A